Security audit
Pivotal Tracker
Security checks across malware telemetry and agentic risk
Overview
No material security concern was found; the inspected skill guidance is explicit about its higher-impact workflows and ties them to user-directed tasks.
Install only if you intend to let the agent assist with the described operational workflows. For skills that touch production systems, admin moderation, email, observability data, or release actions, review commands before execution and ensure the agent is using the intended authenticated account and environment.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
58/58 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.